Reference

Release notes

What changed in each production release of the hosted NetConverter service, newest first.

Updated November 3, 2026 · Latest terminal release: CLI 0.7.3

Changes to the hosted NetConverter service, newest first. Each entry is one production release, identified by its date and build id. The terminal has its own CLI release notes, and the MCP tool reference is regenerated with every catalog change.

Next release

MCP for every Quick account.

New

• Every Quick user can connect an AI assistant to the hosted MCP server by signing in with their NetConverter account. Each user sees their own jobs and the NetConverter knowledge base. Quick accounts use sign-in only; API keys are not available on Quick accounts.

Changed

• Checkpoint totals in the REST API job report are counted the same way as the MCP evidence summary, so both report the same numbers for a job.

November 4, 2026 · build a7e065e9

A ranked answer to "why does this job need review?", clearer diagrams and matching evidence counts.

New

• New MCP tool why_needs_review: one ranked answer to "why does this job need review?" It lists blocking reasons first, then each readiness check that holds the job, with what to do and which evidence section to read next. It is also available in strict view.
• Jobs converted on the current engine record each readiness check that holds them for review, so the reasons are stored as checks instead of being read back from warning text. Older jobs are still explained from their warnings.
• Quick Convert lists renamed objects on its Decisions tab: the old name, the new name and the reason.

Fixed

• Diagrams place each interface in its security zone. Zone membership no longer follows the routing instance.
• The REST API job report and the MCP get_evidence summary report the same assurance counts.
• A management zone that the migration guidance says to leave out is reported as a declared omission. It no longer holds a job for review as if it had been dropped.
• Factual corrections to the knowledge-base guidance for guided migration decisions.

Changed

• Structural migration guidance uses the job's dependency graph when it searches the knowledge base, so playbooks for the migration pair rank higher.

November 4, 2026 · build b70665fb

More precise ASA and NAT conversion notes.

Fixed

• ASA conversions no longer add a forwarding guard for a zone that the target configuration does not keep.
• NAT notices name the target rule that was generated and the source line it came from.

November 3, 2026 · build d265ab98

Optimizer safety and Fortinet fixes.

Fixed

• SNMP credentials are withheld from findings and validation output.
• The optimizer no longer proposes merging rules whose match conditions or actions differ, and refuses recommendations that would contain credentials.
• Each optimizer check result is tied to the finding it reports on, so a result cannot be shown against a different finding.
• Fortinet jobs: knowledge-base lookups recognise every supported Fortinet platform name, and optimization jobs keep their source-parsing check results.
• AI Studio explains an optimizer assessment directly instead of falling back to migration guidance.
• MCP configuration summaries keep OSPF key-chain references that are not secrets.

Changed

• AI requests are checked against our data-handling rules before anything is sent; requests that would break them are refused and recorded.

November 2, 2026 · build a5372e38

Guided migration from your AI assistant, and guided choices that reach the output.

New

• Guided migration from an MCP client: list the operations you can choose, then read and check a prescan's decision document. Where the write tools are enabled for your tenant, record your decisions and queue the conversion.
• New MCP tool set_view_level lowers the view for one MCP session. It never shows more than your access grant allows.
• Guided mapping recommends each answer from the knowledge base and says why. Router and switch jobs get questions about STP mode, LAG VLAN membership, interface readdressing and the management instance.
• Administrators can grant MCP access to named users on Quick accounts. These users sign in with their NetConverter account and see only their own jobs.

Fixed

• Guided zone mapping and canonical zone naming now rename the generated Palo Alto zones, and rules and NAT follow the new names.
• The opt-in EIGRP to OSPF replacement is generated on Junos SET targets, and the output claims only what was generated.
• Cisco IOS-XE routers keep their HSRP groups, so a router migration to Junos converts HSRP to VRRP.
• Excluding unused objects removes them when the source is complete, and says why when it is held back.
• Junos switches keep the source STP root priority.
• When a result is withheld, the response gives the job status, the main reasons in plain words and the next step.
• Signed-in traffic has its own per-address rate limit, so colleagues behind one office address are not held to the limit for anonymous requests.

Changed

• apply_mapping_answers is a write tool, like propose_operations and submit_conversion. It is listed only where the write tools are enabled for your tenant, and never in strict view.
• Every write tool records an audit entry before it runs. If the entry cannot be written, the call is refused and nothing changes.
• Direct sign-in accepts known client applications only. Setup pages no longer suggest registering a client automatically.

4 production releases listed. For what is available and what is next, see product updates.

Source and release context: CLI release notes · Product updates